Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89e68b1a-4ff5-36af-a114-3d62b90b2871.roa
File: 89e68b1a-4ff5-36af-a114-3d62b90b2871.roa (raw, json)
Hash identifier: DoeiNEKKF2fA/o6gznnPs+9t7KcYDOrG7zvaKJjiXC0=
Subject key identifier: 0A:78:1B:C5:1F:9C:96:EC:98:AB:40:D5:31:20:63:BF:7D:AA:E4:E9
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285841076DBBEAD665D93F1F422F40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89e68b1a-4ff5-36af-a114-3d62b90b2871.roa
Signing time: Fri 24 Feb 2023 12:00:00 +0000
ROA not before: Fri 24 Feb 2023 12:00:00 +0000
ROA not after: Fri 25 Aug 2023 04:00:00 +0000
asID: 14277
IP address blocks: 66.160.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:07:6d:bb:ea:d6:65:d9:3f:1f:42:2f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 24 12:00:00 2023 GMT
Not After : Aug 25 04:00:00 2023 GMT
Subject: CN=71b492f8-3b99-41e4-9ec6-4037e8ca1b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:b4:e2:2c:7e:98:2d:6e:b2:34:0e:7b:32:
45:5c:9e:e6:3c:54:7b:98:cb:1b:b6:b0:59:19:b8:
23:0a:fd:e4:a7:a9:a2:50:a2:13:2d:69:7a:c3:6d:
a5:0b:38:a7:25:37:ba:ab:36:8d:3b:f1:fc:02:17:
26:2f:9e:19:7d:dd:4f:ea:c9:b4:57:fc:28:5b:79:
75:c3:08:0b:72:9c:02:b1:01:d5:fe:e1:01:79:72:
1b:d4:a5:4b:83:56:f5:bc:fe:56:22:6f:9d:9b:c1:
16:cb:e4:d8:1e:ad:62:fb:0e:2e:49:fa:0a:3d:82:
f3:8b:44:4e:3b:c9:b5:c2:62:af:26:b8:71:64:b4:
d6:13:f5:ef:3f:e2:41:db:1d:e2:85:d0:b7:62:5b:
51:47:a3:93:02:16:0d:28:6b:a4:4e:8a:5b:df:00:
80:73:60:a5:41:7d:71:8f:4e:5c:63:cf:9d:3b:5e:
40:0d:a8:7d:3a:4c:0b:e4:bd:eb:e8:1e:8b:1c:31:
e4:41:cd:c9:03:b3:77:9a:2e:f6:53:25:ae:48:39:
4b:29:f4:8c:77:94:9a:fc:0e:85:6f:b0:23:5e:0b:
04:f3:51:3e:00:e4:d7:ac:41:59:e4:dc:18:da:e9:
1b:da:47:13:75:4c:45:ed:9d:3a:7d:52:3f:ed:33:
39:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:78:1B:C5:1F:9C:96:EC:98:AB:40:D5:31:20:63:BF:7D:AA:E4:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89e68b1a-4ff5-36af-a114-3d62b90b2871.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
66.160.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:8e:01:90:b0:4a:d4:ce:9a:ae:46:19:45:dc:06:4c:df:e4:
b2:c5:d0:a1:91:af:99:74:bd:6f:c1:c4:ea:2c:e2:7c:ad:79:
9d:35:c9:14:72:7d:59:7b:d9:52:6d:dd:e6:eb:1f:9b:09:8c:
39:82:25:62:b8:cf:0f:c6:61:19:db:e9:9b:39:0a:a4:dd:7e:
f7:ed:68:ba:05:89:44:58:81:04:76:8d:a0:45:3b:4d:52:f3:
0c:d8:b6:06:3f:48:e3:65:30:2a:d9:15:e8:86:89:68:ed:46:
16:cc:9d:c9:39:55:38:5d:33:6c:fe:9b:d9:f7:c7:8d:7f:de:
b5:8f:47:49:8b:4b:17:b2:2f:95:84:0a:fe:87:a5:ea:c9:54:
69:dd:92:e1:f5:31:cf:86:9d:d9:e1:65:e6:86:8b:05:c4:41:
d0:45:7b:6f:25:cc:f2:d9:b3:19:c4:c9:dc:e0:87:0b:f3:2d:
32:5b:1f:13:fd:ba:e3:10:42:86:78:6b:95:7a:16:21:cd:82:
71:28:af:d0:b6:41:03:36:ba:a5:e6:66:26:84:d3:71:a2:42:
59:82:1c:24:99:59:59:22:27:12:f4:64:71:ee:62:48:83:70:
80:1f:fd:2b:14:8b:9e:5c:34:3d:3e:41:d9:d3:67:ad:ae:73:
bb:3d:02:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 04:19:49 2023 by rpki-client on console-fra.rpki-client.org